Privacy Policy

Effective Date: May 12, 2026
Last Updated: May 12, 2026

This Privacy Policy explains how 10x10 Booths (which may be hereinafter referred to as "10x10 Booths," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit https://10x10booths.com (the "Site"), submit a project inquiry, communicate with us, or otherwise engage our exhibition design, fabrication, rental, and logistics services (collectively, the "Services"). This Privacy Policy is intended to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), the Colorado Privacy Act ("CPA"), the Connecticut Data Privacy Act ("CTDPA"), the Utah Consumer Privacy Act ("UCPA"), and other state laws as set out in Section 12.

By using the Site or the Services, you acknowledge that you have read and understood this Privacy Policy.

‍

1. Who This Policy Covers

This Privacy Policy applies to personal information we collect from: visitors to the Site; prospective and existing clients and their employees; vendors, contractors, and event partners; and individuals who otherwise communicate with us in connection with the Services. It does not apply to employment-related personal information, which is governed by a separate notice.

‍

2. Information We Collect

We collect the following categories of personal information. The specific data we collect about you depends on how you interact with us.

a. Information you provide directly.

• Identifiers: name, business email, phone number, job title, company name, and mailing/billing address.
• Project information: details you share in a project brief, RFP, exhibitor manual, brand assets, dimensions, show schedule, budget range, and similar information.
• Commercial information: services purchased or rented, project history, and invoicing details (excluding full payment card numbers, which are handled by our payment processors).
• Communications: emails, messages, call notes, and meeting recordings where lawfully captured and disclosed.

b. Information collected automatically.

• Device and usage data: IP address, browser type and version, operating system, device identifiers, referring/exit URLs, pages viewed, links clicked, time spent on pages, and approximate geolocation derived from IP address.
• Cookies and similar technologies: see Section 7.

c. Information from third parties.

• Publicly available business information, enrichment data from B2B data providers (e.g., LinkedIn-derived company data), and referrals from event organizers, partners, and existing clients.
• Analytics and advertising providers (e.g., Google Analytics, LinkedIn Insight Tag, Meta Pixel) where used.

We do not knowingly collect Social Security numbers, driver's license numbers, passport numbers, financial account numbers, precise geolocation, biometric information, health information, or information about a known child under 16. Please do not submit such information to us.

‍

3. How We Use Personal Information

• Respond to inquiries, prepare quotes, and provide the Services.
• Manage projects, including design, fabrication, logistics, installation, and dismantling.
• Communicate about active projects, schedules, approvals, and invoices.
• Send marketing communications about our services, case studies, events, and show calendars (you can opt out at any time).
• Operate, secure, monitor, and improve the Site and Services.
• Conduct analytics and measure the effectiveness of marketing campaigns.
• Comply with legal obligations, enforce our Terms, and protect our rights and the rights of others.

‍

4. Legal Bases / Purposes for Processing

Depending on the interaction, we process personal information because: it is necessary to respond to your request or perform a contract; we have a legitimate business interest (such as operating and securing the Site, marketing our services to businesses, and recovering amounts owed); we have your consent (for non-essential cookies and certain marketing); or we must comply with a legal obligation.

‍

5. How We Disclose Personal Information

We do not sell personal information for monetary consideration. We may disclose personal information to the following categories of recipients, only for the purposes described in this Privacy Policy and subject to appropriate contractual protections:

• Service providers and processors: cloud hosting and storage, CRM, email and marketing platforms, analytics, project management, accounting, payment processing, and freight and logistics providers.
• Event organizers, venues, and general services contractors as necessary to deliver booths to your stand.
• Subcontractors and fabricators engaged on a specific project.
• Our offices in the United Kingdom, the Netherlands, and the United Arab Emirates for global program delivery, subject to applicable transfer safeguards.
• Professional advisors such as legal, accounting, and insurance advisors.
• Government authorities or other parties as required by law, legal process, or to protect rights, property, or safety.
• Acquirers in connection with a merger, financing, acquisition, reorganization, or sale of assets.

Certain online advertising and analytics activities may be considered "sharing" or "sale" of personal information under some state laws (for example, when cookies and tracking pixels send identifiers to third parties for cross-context behavioral advertising). See Section 8 for your rights and choices.

‍

6. Data Retention

We retain personal information only as long as needed for the purposes described above, then we delete, anonymize, or archive it. Typical retention periods include: prospect and inquiry data, up to 36 months from the last interaction; active client project records, for the duration of the engagement plus seven years for tax, warranty, and audit purposes; marketing subscriber records, until you unsubscribe and a reasonable period thereafter to honor your opt-out.

‍

7. Cookies and Tracking Technologies

The Site uses cookies, pixels, tags, and similar technologies to operate the Site, remember preferences, measure performance, and where applicable serve relevant advertising. Categories include: strictly necessary cookies, performance and analytics cookies, functional cookies, and advertising cookies.

You can control cookies through your browser settings, our cookie banner where provided, or industry opt-out tools (e.g., the Network Advertising Initiative and Digital Advertising Alliance opt-out pages, the Your Online Choices page in the EU, and the AdChoices icon). The Site honors the Global Privacy Control ("GPC") signal where required by law as an opt-out of "sale" or "sharing" of personal information for targeted advertising.

‍

8. Your Choices

• Marketing emails: opt out via the unsubscribe link in any email or by contacting us.
• Cookies: adjust browser settings; use any cookie preferences tool we make available on the Site; enable a recognized opt-out preference signal such as GPC.
• Project communications: required to deliver active projects; you may close your account or end the engagement, subject to contractual obligations.

‍

9. Information Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

‍

10. Children's Privacy

The Site and the Services are intended for businesses and professionals 18 years of age or older. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us and we will delete it.

‍

11. International Transfers

10x10 Booths operates internationally, with offices in the United States, the United Kingdom, the Netherlands, and the United Arab Emirates. Personal information may be transferred to and processed in countries other than the country in which it was collected. Where required by law, we implement appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

‍

12. State Privacy Rights

This Section 12 applies to residents of U.S. states with comprehensive consumer privacy laws. Where applicable law conflicts with this Privacy Policy, applicable law controls. The rights described in this Section 12 are provided only to the extent required by the specific laws of your state of residence.

A. California (CCPA/CPRA)

California residents have the following rights, subject to verification and certain exceptions:

• Right to Know: request the categories and specific pieces of personal information we have collected, the sources, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: request deletion of personal information we have collected, subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: opt out of "sale" or "sharing" for cross-context behavioral advertising. We will treat a valid GPC signal as a sale/sharing opt-out for the browser that sent it.
• Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information for purposes that require this right.
• Right to Non-Discrimination: we will not discriminate against you for exercising your rights.

Categories of personal information collected, disclosed for a business purpose, and "sold" or "shared" in the preceding twelve months: identifiers; commercial information; internet/network activity; geolocation (approximate, IP-based); inferences. We do not knowingly sell or share the personal information of consumers under 16. We retain each category for the periods described in Section 6.

Shine the Light: California residents may request information about disclosures of personal information to third parties for their direct marketing purposes by contacting us at [email protected]. We do not disclose personal information to third parties for their direct marketing purposes.

B. Virginia (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a copy of personal data we process; to opt out of the processing of personal data for purposes of targeted advertising, sale, or certain profiling; and to appeal a denial of a request. To appeal, reply to our written decision or email [email protected] with "Privacy Appeal" in the subject line.

C. Colorado (CPA)

Colorado residents have rights of access, correction, deletion, portability, and to opt out of targeted advertising, sale of personal data, and certain profiling that produces legal or similarly significant effects. We honor universal opt-out mechanisms recognized by the Colorado Attorney General, including GPC.

D. Connecticut (CTDPA)

Connecticut residents have rights of access, correction, deletion, portability, and to opt out of targeted advertising, sale, and certain profiling. We honor recognized universal opt-out mechanisms.

E. Utah (UCPA)

Utah residents have rights of access, deletion, portability, and to opt out of targeted advertising and sale of personal data.

F. Other States

Residents of Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Tennessee (TIPA), Indiana (ICDPA), Delaware (DPDPA), New Jersey (NJDPA), New Hampshire (NHDPA), Minnesota (MCDPA), Maryland (MODPA), Kentucky (KCDPA), Nebraska (NDPA) and other states with comparable laws have rights substantially similar to those above, including access, deletion, correction (where provided), portability, and opt-out of targeted advertising, sale, and certain profiling, subject to each state's effective date and thresholds. We process and honor those rights consistent with applicable law.

If you are located in the United Kingdom or the EU/EEA, please see the Addendum below.

G. Sensitive Data and Consent

Where a state law requires opt-in consent to process sensitive data (for example, Virginia, Colorado, Connecticut), we will obtain that consent before processing such data, except where a legal exception applies. We do not currently process sensitive data for the operation of the Site.

H. Authorized Agents

You may use an authorized agent to submit a privacy rights request. We may verify both the agent's authority and your identity before fulfilling the request.

I. How to Submit a Request

• Email: [email protected] with the subject line "Privacy Request."
• Mail: 10x10 Booths, 7600 Chevy Chase Dr., Suite 300, Austin, TX 78752, USA.

We will acknowledge your request within the time required by applicable law (generally within 10 business days for California and within 45 days for most other states), and we will respond within the timeframe required by the applicable law, generally 45 days, with a possible 45-day extension. We may request information necessary to reasonably verify that you are the person about whom the personal information was collected.

‍

13. Do Not Track and Global Privacy Control

Some browsers transmit a "Do Not Track" (DNT) signal. The Site does not currently respond to DNT signals because there is no industry consensus on how to interpret them. The Site does honor the Global Privacy Control (GPC) signal as a request to opt out of "sale" or "sharing" of personal information, as required by applicable law.

‍

14. Third-Party Sites and Services

The Site may contain links to third-party websites, social media platforms, and tools that have their own privacy practices. We are not responsible for the content or privacy practices of third parties. We encourage you to read the privacy policy of every site you visit.

‍

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this policy reflects the most recent revision. Material changes will be communicated through the Site or by other reasonable means.

‍

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact us:

10x10 Booths
7600 Chevy Chase Dr., Suite 300
Austin, TX 78752, United States
Email: [email protected]

‍

‍

Addendum: Additional Disclosures for European and UK Residents

This Addendum applies to individuals located in the jurisdictions where the GDPR is applicable. For the purposes of these laws, 10x10 Booths is the "Data Controller."

‍

1. Legal Bases for Processing

We process your personal data only when we have a valid legal basis:

• Performance of a Contract: To provide quotes, design booths, and manage your exhibition projects.
• Legitimate Interests: To improve our services, secure our website, and conduct business-to-business marketing.
• Legal Obligation: To comply with tax, safety, and accounting laws in the US, UK, and NL.
• Consent: Where you have explicitly opted-in to receive marketing or use non-essential cookies.

‍

2. Internal Data Transfers

10x10 Booths is a single global entity. While we have branch offices in the UK and Netherlands, your data may be managed at our headquarters in the United States. We maintain high-level technical and organizational security measures across all our locations to ensure your data receives a level of protection essentially equivalent to that in the EEA/UK.

‍

3. Your Privacy Rights

You have the following rights, which you may exercise by contacting us at [email protected]:

• Access & Portability: Request a copy of your data in a usable format.
• Correction & Deletion: Ask us to fix or delete your data (the "Right to be Forgotten").
• Restriction & Objection: Ask us to stop certain types of processing.
• Withdrawal of Consent: Withdraw your consent for marketing at any time.
• Lodge a Complaint: You have the right to contact your local regulator (e.g., the ICO in the UK or the AP in the Netherlands) if you are unsatisfied with our response.

‍

4. Data Retention

We retain client data for the duration of our business relationship and for a subsequent period required by tax and contract law (typically 7 years) before securely deleting or anonymizing the records.

‍

5. How to Manage Cookies

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

‍